Back to home

Ethics, Philosophy & Privacy

Our commitment to responsible AI, protecting your data and the values that guide every decision at SaiphIA.

Last updated: June 2026

01

Our philosophy

At SaiphIA, we believe the most powerful technology is the one that remains invisible — the kind that simplifies without adding complexity, amplifies without dominating, serves without enslaving.

Our name comes from Saiph, a blue supergiant star in the constellation Orion: an immense force that acts from the shadows. That is exactly our vision of artificial intelligence — a tool in service of people, never the other way around.

We don't develop AI to impress. We develop it to solve real problems for SMBs, nonprofits and community centers that deserve access to the same technologies as large enterprises.

Radical transparency

We always explain what our technology does, how it works and why. No black boxes, no unnecessary jargon.

Humans first

AI doesn't replace people — it frees them from repetitive tasks so they can focus on what truly matters: creativity, relationships and strategy.

Uncompromising integrity

We never promise what we can't deliver. If an AI solution isn't right for your situation, we'll tell you — even if it means losing a contract.

Accessibility for all

SMBs, nonprofits and community centers should not be excluded from the AI revolution. We adapt our solutions and pricing to each organization's reality.

02

Our ethical commitment to artificial intelligence

Artificial intelligence is an extraordinary tool — but like any powerful tool, it demands responsibility, vigilance and humility.

Algorithmic transparency

We document and explain how every AI solution we deploy works. Our clients always understand what data their systems rely on, how decisions are made and what the technology's limitations are. We do not tolerate unexplained "black boxes."

Bias prevention

We actively test our models and data to detect and correct potential biases — whether related to gender, ethnicity, age, language or any other characteristic. The AI we deploy must be equitable for all users.

Mandatory human oversight

No AI system deployed by SaiphIA makes critical decisions without human supervision. Decisions that significantly affect people — hiring, credit, services — always keep a human in the loop.

Refusal of certain applications

We categorically refuse to develop AI solutions intended for mass surveillance, psychological manipulation, disinformation, social scoring or any application that undermines human dignity. This is non-negotiable.

Continuous improvement

Ethics in AI is not a destination, it's a journey. We commit to staying informed about regulatory developments, best practices and emerging risks, and to adapting our practices accordingly.

03

Protection of your personal information

In compliance with Quebec's Bill 25 (An Act to modernize legislative provisions as regards the protection of personal information) and Canada's PIPEDA (Personal Information Protection and Electronic Documents Act).

3.1 — Person responsible for the protection of personal information

In accordance with Bill 25, SaiphIA has designated a person responsible for the protection of personal information:

Patrick Girardin
Co-founder & Person Responsible for the Protection of Personal Information
Email: pgirardin@saiphia.ca
SaiphIA — Quebec, Canada

3.2 — Information we collect

In the course of our activities, we may collect the following information:

Via our website

Name, email address, phone number and message when you use our contact form. Anonymized browsing data through analytical cookies.

Via our client engagements

Data you entrust to us as part of an engagement (CRM data, documents, databases) is processed exclusively for the execution of the agreed-upon mandate. We act as a processor, not as an owner of your data.

Via our AI agents

Interactions with AI agents we deploy for our clients are processed in strict compliance with confidentiality agreements. Conversational data is never used to train other models without explicit consent.

3.3 — Processing purposes

Your personal information is used exclusively to:

  • Respond to your information and quote requests
  • Execute contractually agreed-upon engagements
  • Improve our services and website experience
  • Comply with our legal and regulatory obligations
  • Communicate with you about our services (with your consent)

We never sell, rent or share your personal information with third parties for commercial or advertising purposes.

3.4 — Consent

We obtain your consent before collecting, using or disclosing your personal information, except where the law authorizes us to act without consent. Your consent may be express (form, checkbox) or implied (within an existing business relationship).

You may withdraw your consent at any time by contacting us. Withdrawal of consent may, however, limit our ability to provide certain services.

3.5 — Retention and destruction

We retain your personal information only for the period necessary for the purposes for which it was collected:

  • Website contact data: 24 months after last contact, then secure destruction
  • Client engagement data: duration of engagement + 12 months (unless otherwise required by law), then return or destruction at your choice
  • Analytical data (cookies): 13 months maximum

Data destruction is performed securely and irreversibly, in accordance with industry best practices.

3.6 — Security measures

We implement technical and organizational security measures proportional to the sensitivity of the information we hold:

  • Data encryption in transit (TLS 1.3) and at rest (AES-256)
  • Multi-factor authentication for all system access
  • Access controls based on the principle of least privilege
  • Logging and monitoring of access to sensitive data
  • Regular security assessments and continuous updates
  • Ongoing team training in security and privacy
04

Cookies

Our website uses cookies to improve your experience:

Essential cookies

Required for website functionality (language preference, security). Cannot be disabled.

Analytical cookies

Help us understand how visitors use our site anonymously. You may decline them without impact on your browsing.

We use no advertising or tracking cookies. Your browsing on our site does not generate any advertising profile.

05

Your rights

Under Bill 25 and PIPEDA, you have important rights regarding your personal information.

Right of access

You have the right to know what personal information we hold about you and to obtain a copy.

Right to rectification

You may request the correction of any inaccurate, incomplete or ambiguous information.

Right to erasure

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected.

Right to portability

You may request that your information be provided to you in a structured, commonly used technological format.

Right to withdraw consent

You may withdraw your consent at any time for the processing of your personal information.

Right to complaint

If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (CAI).

To exercise any of these rights, contact our person responsible for the protection of personal information at pgirardin@saiphia.ca. We commit to responding within 30 days as required by law.

06

Data processing in our AI solutions

The trust you place in us by entrusting your data is a privilege we take very seriously.

Strict data separation

Each client's data is isolated in separate environments. One client's data is never accessible to another client, nor mixed with other data sets.

No reuse without consent

Your data is never used to train general-purpose AI models or to benefit other clients. If a cross-learning opportunity arises, we request explicit and detailed consent.

Data location

By default, we host your data in Canada. If the use of cloud services involves a transfer to other jurisdictions, we inform you in advance and ensure adequate contractual protections.

Right to complete restitution

At the end of any engagement, you may request complete restitution of your data in a usable format, followed by secure destruction from our systems.

07

Privacy incident management

In accordance with Bill 25, in the event of a privacy incident involving personal information, SaiphIA commits to:

  • Immediately taking measures to limit damages
  • Notifying the Commission d'accès à l'information du Québec (CAI) if the incident presents a serious risk of harm
  • Notifying affected individuals if the incident presents a serious risk of harm
  • Maintaining a registry of privacy incidents
  • Analyzing causes and implementing corrective measures
08

Data from Facebook and Instagram (Meta)

SaiphIA operates an intelligent conversational agent that interacts with the public on its Facebook and Instagram pages. This section describes how data from these platforms is processed, in accordance with the requirements of Meta Platforms and Quebec's Bill 25.

  • Data collected — When you interact with our pages (public comment, private message/DM), we collect: the content of your message or comment, your Meta-provided identifier (Messenger PSID or Instagram IGSID), your public name and the timestamp. We do not access your private profile or your contacts.
  • Purposes — This data is used solely to respond to you through our agent, route your request to the appropriate handling (information, service, follow-up) and ensure follow-up of the exchange. Never for targeted advertising.
  • Use of artificial intelligence — Our responses are generated by an AI agent (with a synthetic voice in private messages). This use of AI is disclosed to you upon first contact. The content is processed by our AI model provider (Anthropic) without being used to train general-purpose models.
  • Sharing — We use Meta's official APIs (Graph API, Messenger, Instagram). No data is sold or shared for commercial purposes. Technical subprocessors are bound by confidentiality agreements.
  • Retention — Facebook/Instagram conversational data is retained for a maximum of 24 months after the last exchange, then securely destroyed.
  • Deletion — You may request deletion of this data at any time through our “Delete your data” page or at pgirardin@saiphia.ca (processed within 30 days).
09

Contact us

For any questions regarding this policy, your personal information or our AI ethical practices, contact us:

SaiphIA
Person Responsible for the Protection of Personal Information
Patrick Girardin
pgirardin@saiphia.ca

We commit to handling every request with diligence, respect and transparency.